Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/0/61DF0BAB5B1E0942B264773D0F55A44166659326.cer
File:                     61DF0BAB5B1E0942B264773D0F55A44166659326.cer (raw, json)
Hash identifier:          kmsb/smv/SAPCCB14Uh8XQWMLBaGa7/7oSCVKqF9xVU=
Subject key identifier:   61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
Authority key identifier: EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB
Certificate issuer:       /CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
Certificate serial:       30B48C88EFAA187FDB8938D209AF4293DBD838D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.mft
caRepository:             rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 22:42:00 +0000
Certificate not after:    Thu 13 Mar 2025 22:47:00 +0000
Subordinate resources:    AS: 28309
                          IP: 168.228.96.0/22
                          IP: 179.189.0.0/20
                          IP: 187.44.64.0/20
                          IP: 189.38.32.0/20
                          IP: 2804:16c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b4:8c:88:ef:aa:18:7f:db:89:38:d2:09:af:42:93:db:d8:38:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE917EBC7A158783B44BC6ED82217434F28ADEFB
        Validity
            Not Before: Mar 14 22:42:00 2024 GMT
            Not After : Mar 13 22:47:00 2025 GMT
        Subject: CN=61DF0BAB5B1E0942B264773D0F55A44166659326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:71:67:44:a8:92:02:65:e7:71:e3:32:81:e0:
                    68:f1:56:db:6e:7c:15:b7:aa:33:f6:4f:b5:8d:92:
                    04:5a:9e:cd:4c:5f:ce:ea:0e:97:d4:a3:01:b9:97:
                    72:55:05:60:65:ce:a5:5c:14:ff:93:18:12:06:f7:
                    78:48:64:87:c7:e7:9c:23:aa:2a:ea:80:f2:7a:e8:
                    a1:5e:8e:fc:93:f1:26:81:97:a1:82:73:0b:a4:7a:
                    cc:2b:ec:aa:2d:6b:ca:7d:d0:37:f9:1e:77:43:bd:
                    be:a6:40:70:de:aa:02:0b:dd:3b:e4:f7:62:3f:a0:
                    d4:12:69:46:c5:66:59:2a:2d:eb:27:e1:08:32:f3:
                    a7:b6:07:85:c4:d5:15:b8:bc:26:f9:89:0c:0e:9e:
                    95:03:08:ff:6a:18:2a:6f:dd:82:c4:fa:7e:e5:12:
                    42:d8:31:fc:13:9a:31:1f:c6:a0:26:e9:4e:d7:17:
                    c9:5f:6d:0e:87:f4:91:62:13:91:60:b6:f6:40:b0:
                    81:49:e7:cf:db:d7:d7:61:af:13:3e:c2:32:8a:bd:
                    f8:6f:66:42:b5:e5:08:0f:00:28:8b:cf:17:06:0c:
                    a0:db:ed:75:b4:9c:01:e5:ca:66:bb:a0:d9:05:20:
                    34:d5:56:ee:10:16:41:51:ad:1e:3f:a8:da:09:f2:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                61:DF:0B:AB:5B:1E:09:42:B2:64:77:3D:0F:55:A4:41:66:65:93:26
            X509v3 Authority Key Identifier:
                keyid:EE:91:7E:BC:7A:15:87:83:B4:4B:C6:ED:82:21:74:34:F2:8A:DE:FB

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE917EBC7A158783B44BC6ED82217434F28ADEFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd25c9bb7e5cac7419fa9193770f64a6edf20c19.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/EPiNpSvxFuaVhoZzLwXDuh2zkPtcUxEt5Ub4aGCfZyH4/0/61DF0BAB5B1E0942B264773D0F55A44166659326.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.228.96.0/22
                  179.189.0.0/20
                  187.44.64.0/20
                  189.38.32.0/20
                IPv6:
                  2804:16c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28309

    Signature Algorithm: sha256WithRSAEncryption
         79:fb:2d:d4:aa:ea:a3:40:9a:8a:03:7e:c2:3e:dd:7b:8b:6d:
         9a:57:7d:b3:7c:47:ab:df:ca:be:46:da:f0:62:e1:71:d3:40:
         e0:a7:d6:5f:e1:8e:99:ef:76:ff:13:b0:8a:07:d2:92:a4:d4:
         e7:65:89:34:1c:a6:d2:e5:a5:6d:2b:cb:d0:c0:ba:8e:ff:d7:
         3d:d6:40:7a:6a:d9:0d:43:81:67:fb:95:b8:62:0f:3f:ab:ba:
         2f:73:a4:21:e9:a6:8d:a2:28:20:8d:80:bf:18:a1:84:38:30:
         aa:20:4f:48:bc:a6:4e:c2:b0:37:78:1d:19:d6:bd:3c:1c:18:
         57:0d:8c:77:97:1b:16:94:0b:a4:9a:20:6a:d7:70:13:7d:b8:
         42:89:d8:96:6a:2f:2b:51:71:a4:01:49:1d:8e:65:1f:59:00:
         0f:c8:b1:2e:bf:8c:c9:15:02:58:74:7b:b9:ff:c8:5d:d7:b5:
         e3:77:7c:58:1d:c3:03:b7:41:20:eb:a4:ef:94:ec:ec:1b:6e:
         12:f2:37:ae:eb:40:d2:c7:52:4a:c9:3f:6d:1a:01:a2:46:a5:
         e1:03:e4:2e:32:d0:9a:5c:ee:3e:a9:b0:c0:5f:03:47:a0:04:
         28:bb:7d:ad:0f:48:8b:63:10:b4:49:89:54:cf:16:a9:99:25:
         7a:59:50:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:21 2024 by rpki-client on console-fra.rpki-client.org